[Open Mic] Don’t Trust the Claim: Reproducible Firmware Evidence with WedgeBench
“It passed on my laptop.” What can the next maintainer actually verify?
WedgeBench is an open-source workflow that turns bounded malformed-input parser tests into reproducible, machine-checkable evidence. It combines a deterministic corpus, thin target adapters, structured artifacts, and validation.
I’ll walk through the go-tcg-storage reference integration, deliberately alter a copy of the evidence, and show the validator rejecting the mismatch. We’ll examine what PASS establishes—and why it does not certify firmware safety, authenticate the author, or validate physical hardware.
This complements fuzzing; it does not replace it. You’ll leave with a public workflow to try and a concrete pattern for maintainer handoffs. Bring your skepticism: challenge the assumptions, find a mutation the validator should reject but accepts, or nominate the next real target.
Don’t trust the claim. Run the workflow.
Keith Gariepy is Lead System Architect at Kaimera Group and leads WedgeBench, an open-source project supported by the Open Source Firmware Foundation. His background spans enterprise audiovisual architecture, control-system programming, and systems integration, including global AV design work at Pacific Life. A Crestron Master Certified Programmer, he brings a practical engineering perspective to reproducibility and failure analysis. With WedgeBench, he is exploring how deterministic parser tests and machine-checkable evidence can help maintainers rerun results, inspect assumptions, and challenge technical claims. He welcomes skeptical reviewers, reproducible counterexamples, and collaborators interested in testing the workflow on additional targets.